CVEs published in March 2014
544 vulnerabilities, 68 critical, 2 exploited.
- owncloud, owncloud server +1 moreCross-site request forgery (CSRF) vulnerability in apps/calendar/ajax/settings/settimezone in...6.8 Medium
- owncloud serverMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud 4.5.x before 4.5.7 allow...6.8 Medium
- owncloud, owncloud server +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.12 and 4.5.x...6.8 Medium
- owncloud, owncloud server +1 moreThe default Flash Cross Domain policies in ownCloud before 5.0.15 and 6.x before 6.0.2 allows...5.0 Medium
- owncloud, owncloud server +1 moreSession fixation vulnerability in ownCloud before 6.0.2, when PHP is configured to accept session...6.8 Medium
- puppet enterpriseMultiple cross-site request forgery (CSRF) vulnerabilities in Puppet Enterprise (PE) before 3.0.1...6.8 Medium
- owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in ownCloud before 5.0.6 allows remote authenticated users to...4.6 Medium
- owncloud serverThe configuration loader in ownCloud 5.0.x before 5.0.6 allows remote attackers to obtain CSRF...5.0 Medium
- owncloudDirectory traversal vulnerability in apps/files_trashbin/index.php in ownCloud Server before 5.0...4.0 Medium
- owncloud, owncloud server +1 moreownCloud before 5.0.6 does not properly check permissions, which allows remote authenticated...6.5 Medium
- owncloud, owncloud server +1 moreThe login page (aka index.php) in ownCloud before 5.0.6 does not disable the autocomplete setting...2.1 Low
- owncloud, owncloud server +1 moreOpen redirect vulnerability in the Login Page (index.php) in ownCloud before 5.0.6 allows remote...5.8 Medium
- owncloud, owncloud server +1 moreapps/calendar/ajax/events.php in ownCloud before 4.5.11 and 5.x before 5.0.6 does not properly...4.0 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5...3.5 Low
- owncloud serverMultiple cross-site scripting (XSS) vulnerabilities in ownCloud 5.0.x before 5.0.6 allow remote...3.5 Low
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.15, 4.5.x before 4.5...3.5 Low
- owncloud, owncloud server +1 moreDirectory traversal vulnerability in lib/files/view.php in ownCloud before 4.0.15, 4.5.x 4.5.11,...4.0 Medium
- owncloud, owncloud server +1 moreThe contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check...4.0 Medium
- fruux sabredav, owncloud server +1 moreSabreDAV Directory Traversal vulnerability5.0 Medium
- owncloud, owncloud server +1 moreIncomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.13 and 4.5.x before...3.5 Low
- owncloud, owncloud server +1 moreMultiple incomplete blacklist vulnerabilities in (1) import.php and (2) ajax/uploadimport.php in...6.5 Medium
- owncloud serverMultiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote...2.1 Low
- puppet enterprise, puppetlabs puppet +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in the (1) node request management, (2...6.8 Medium
- puppet enterprise, puppetlabs puppet +1 moreThe pe_mcollective module in Puppet Enterprise (PE) before 2.7.1 does not properly restrict...8.5 High
- puppet enterprise, puppetlabs puppet +1 morePuppet Enterprise (PE) before 2.6.1 does not properly invalidate sessions when the session secret...4.0 Medium
- puppet dashboard, enterprise +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Puppet Dashboard 1.0 before 1.2.5 and...4.3 Medium
- juniper ive osUnspecified vulnerability in the Linux Network Connect client in Juniper Junos Pulse Secure...7.2 High
- juniper ive osCross-site scripting (XSS) vulnerability in the Pulse Collaboration (Secure Meeting) user pages...3.5 Low
- linuxfoundation cups-filters, canonical ubuntu linux +1 moreMultiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47...6.8 Medium
- owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x...3.5 Low
- owncloud serverMultiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote...4.3 Medium
- owncloud, owncloud server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.12 and 4.5.x before 4...3.5 Low
- proxmox mail gatewayMultiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow...4.3 Medium
- openclassifieds open classifieds 2Cross-site scripting (XSS) vulnerability in classes/controller/error.php in Open Classifieds 2...4.3 Medium
- brother mfc-9970cdw, mfc-9970cdw firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with...4.3 Medium
- brother mfc-9970cdw, mfc-9970cdw firmware +1 moreCross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03...4.3 Medium
- brother mfc-9970cdw, mfc-9970cdw firmware +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with...4.3 Medium
- opensource technologies responsive logo slideshowCross-site scripting (XSS) vulnerability in the Responsive Logo Slideshow plugin for WordPress...4.3 Medium
- marekkis watermarkCross-site scripting (XSS) vulnerability in the Marekkis Watermark plugin 0.9.2 for WordPress...4.3 Medium
- powerarchiverThe Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption...5.0 Medium
- rocklobster contact form 7Rock Lobster Contact Form 7 before 3.7.2 allows remote attackers to bypass the CAPTCHA protection...5.0 Medium
- apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to...6.8 Medium
- apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to...6.8 Medium
- apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to...6.8 Medium
- apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to...6.8 Medium
- apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to...6.8 Medium
- apple iphone os, tvos +1 moreWebKit, as used in Apple iOS before 7.1 and Apple TV before 6.1, allows remote attackers to...6.8 Medium
- apple iphone os, tvos +1 moreUSB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to...7.2 High
- apple iphone osSpringBoard Lock Screen in Apple iOS before 7.1 allows remote attackers to cause a denial of...5.0 Medium
- apple iphone osSpringboard in Apple iOS before 7.1 allows physically proximate attackers to bypass intended...5.8 Medium
- Show moreLoading…